The **Privacy Commissioner of Canada**, **Philippe Dufresne**, has launched a formal investigation into **IDScan.net**, an identity verification company, following reports of a substantial data breach. The incident allegedly led to the theft of personal data, including scans of 153 million drivers’ licenses. **IDScan.net**'s technology is widely utilized across various industries, particularly within the retail and hospitality sectors, for verifying official identification documents. ### Scope of the Investigation Announced on Monday, the investigation will delve into **IDScan.net**'s security measures and assess the adequacy of victim notifications, ensuring compliance with Canada’s federal private-sector privacy law. This was detailed in a press release from the regulator. ### Breach Details Emerge On September 4, **IDScan.net** publicly acknowledged that hackers had accessed user data stored on its cloud platform. However, the company's initial statement did not specify the number of affected customers. This announcement followed a series of reports suggesting the breach exposed drivers' licenses belonging to tens of millions of individuals. **IDScan.net** reportedly became aware of the breach around September 1. This timeline places their discovery just hours after journalist **Brian Krebs** revealed on **KrebsOnSecurity** that scans of 153 million drivers' licenses were being offered for sale on the dark web. As of now, **IDScan.net** has not responded to requests for comment regarding the ongoing situation. The investigation remains active.